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1 

M3H l © * * U fcMfflrf 5 BWSSil i: , 

Mtaig i ©**'J fc:|&Sf-ir*;P0lMB*ft-5**S 2 

© * y i: s c fc mw. ttumMWo 

[H*92] MfaH 2 ©?<*>;&, ^IB'lSBtSiE^ 
ttS** hS§sfrB©ifci^ci&S^*;WcMtSi^ 

mt^a^rr^g^ io 

immniitm^u mmm 1 ©^y tamt s# 
mtzmmmmttumm 1 iae©ia«sti. 
ft*siise©fa«aa-pfeoT, Miatg 

1 ©^ y £A*2ftSifM*fc&gfcSfl*©ifrfr£ft 

Mian 2 © * * y a, mmmmmmznz** vm 
mmz^mt, 20 

1 fl3«©iaiiSBo 

[*S8S4] tfflBS2 ©>**>; 14, R A URXf E E P R 

PROMK»*atrSi ©nvy F£> 

MIS^l ©nv>F}c«fc-3TtufaE E P ROMfct^jA 

^Wf-f ^^fAt.t^TT^'J^r-i'a y% 30 
^0 5 8* 3H 3 © nv> F i: ^m^xmWMm^ + 

©affl^ff-rs^gfc^-rscfc^^fetsai* 

JS2fH«©fH'ISH 0 

[»*iB5] tuiB^2©^^ytt, mit^hmmt^ 
^rdg^, fuia*x F«gg^F)3Sp.nTtyca^^ 

ffitf*£8HK77* y ^r-^ 3 ^SK^StfJgffitT^y 
~>3 vl8?«!7i^£g&-f 3&2© ; &v ? :L-;l/i:;£ 40 

*rt § c t mm ttmtM 4 fE«©fa«g«. 

[»I6] tuia«7^y^-^3^SfR^i, M 

lam ©^ytftStenfc^i ©7^y^-^3>t 

#U MIHfi'ffi7^y^-^3 ySK^tctoTJI^ 
£ ft/cMIE® 1 © * * y icftJA 2 ftfcg 2 © 7 7° y ^r- 
^3y©rtOTta%*fT^Hi:5^ffeD, 
WtSmr-JV *r~~> 3 >aM«7^«, fufEIg 1 © 
7 7° y ^ - 3 > t ft L s Ml as 2 © 7 7° y >t - *> a > 
©rt^tfi**rr££5i^?fc4£fc*fl*fctSII 

*ii5fa«©ia'iS«o 50 
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B»*JS 7 ] tuiam 1 ©77°y >r-is 3 y\±, nv> F 
tfMian 1 t^?n/tftk©77°y^-^3 y 

D§ffb/cav>F^a-r§¥isi:^-r§uh^ 
afc-r«»*« 6 ia«©iaitg«o 
[Wis] Mia^i©77°y^-i/3ytt, ms&z 
© * ^ y X <o §fi b fc n v v F £— o t L < fi £8© n 
?>F£I1IL, MI3II 2©77°y^— >3 > t Sflt 

s^s^rr 5 z: t tsu*^ 7 ia«©fattg 

Ho 

[fSBJl©f¥ffi«£] 
[0001] 

gBStf^©fB'»SB^ff ArIh^*X hSatRtf*© 
EttSKfl* A$tifcS*gBt R t § 0 
[0 0 0 2] 

[^*©fiffi] IC*-H(i, 7*7^7 ^*-KSS 

t©*-K©3tiiit I Cf-7 7°©^g^7^f#o 0 1 C 
f--y7©«S7Ktts tt«7, ^D7^i|7, r- 
^AtB73S7^i:'*^fnTV^„ IC*-Ktt, IC 

§0 IC*-FB\ ^gPS?^bT*^F«Sfc©IB 

fflffitif^si^fccft^o itf^©iastLT, 1 

M^fec^5 0 lC*-Ffi, dtiBCiifmStSo 

-r*^St^n§>'XrAtfc^T, fflAiffiBiJ©/cJ6© 
[0 0 0 3] 

[%^SPRL«fc?fct5Mill] I C*-F^-y7WI 

^-9-^-FLTl^lM C*-KXt±, i&af- + *;u* 
■9"^— h LTl^l/' 1 1 C Fffl^b-r -Y 

7° y ^- a yzokiLic , $ fe ttiaii* €Tiiff s *5 

[0 0 0 4] Sf;, I C*-Ft3ift5^i. ISO 
/I E C 7 8 1 6?S£?nfctj^£Wt-©^*fiM-r 
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*- FrtOO S jWtffTS*^, I S 0/ I E C 7 8 1 

[0005] xmsoumt, i c*-F£j^fi*nfc 

I C*-K<o?0fl!tt*iRi±tS(:i:T?S3o 
[0 0 0 6] 

O^^&'Ji:, mo^UfcSJffltSMSlI^ tan 
[0 0 0 7] H2©^'Jf4, fB'lgWcgt 

[0 0 0 8] £5fc, gZO^t'Jti, RAM&tfRO 
M%Wt«*J*fcLTtiJ:V\ COIH, Mt^2®^ 20 
^'jti, RAMr-^EEPROMfc^tjAtyravy 
Kfc, EEPROMfc»*&$ftfcr-**RAMI«:fc 
iffnvyFfe, t^l/-f^f>XTAfcj;^T7 
fr-i/ a y *SJ D t x. 3 n v y F V^THa^ 
+ *;UOffla*HfT LT t J; 5 fc® 2 (D^ * y 14, 
*2 haSA^Ofr&fcfiftT^y ytHt* 

6 & 5 nr * it 7 7 u 7 3 y SHK^r* SHW 7 
7<J -Jr— 3/ 3 >«Rl*fc, «H7^U fr-*> 3 yiSftlt 30 

[0 0 0 9] ill ©^Uk:teffi2tl/c:77y^ 

yfr5S5nrt;fcfc©fr£#jWrts?&i:> ffi©77 

[0 0 10] 

tsl 1 0©*)t^tKT-S5o *-F«Sgl 1 0(4, 
I C#-FV >^-7x-fX$iJfP[HEgl 00, ia^+ 
12 0, &tf I C*-F^7 7l 5 OfrS 

K?ns„ 1 c*-F-ry^-7x^xwrHigsi 0 

(Hi, I C A-F9 1 'y7l 5 0 *7 
FSSl 0 5 fci&g^+^HrU?* 1 2 0OFIT'37 
y F A P D U ©^SfiMPtSo US** *;Hz b7 
^120it I C A— Ff-y 7° 1 5 OS. If I C ±l— ¥4 

>^-7i-f7»|HlSgl oottrnffi-ztu tta^-v 

F LT^fc^ I C ts- YTkXS I C ts- FJB 50 
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£SffiL, n?^ F A P D UfcSttflStefflcfflSKifrft 
V y F A P D U (4, £ (4§ tf® o k 3 V y F A P 

d u ztm t tdk t c n h wmfflmt 5 3 y f a - 

7t5ltffi*ns 0 nvy FA P D Ut4, ISO/IE 
C 7 8 1 6fflt|»Lft I C*-Fffl(D^7*-V 
7 Ffeitf I C*-Kffl^Tfe5 0 I CiJ-Yf-y? 
150(4, I C^-F^^X^y^SWfcSft&l: 
nSV^3>fy7P*«. I C*-Ff-77l 5 0^ 
^"TS^SPffl?. «W§7aF3;k Stfn?yK 
(4, ISO/IEC7 8 16lWlLm o IC 
*-F^-y7l 5 0©^«?tS, «Sfl±«?, 7 
ny?AMB\ <J-t?-yFAMFf, I/OAtBMi 

^yFSfrPtffcS,, I Cft— F^>£— 7x-fX 
ftWHSS 10 0(1 I C Ff-y 7 1 5 0 
frb I C#-F^>y7l 5 oic I CA-FnvyF^fg 

snfc-b+^L y TVfflSK^&isso^fT&fijS-f 

5o I CA-F^-y7l 5 0(4, HS^^Hzb^ 
1 2 0 fcjgiisnTVSo M, El 1 cD I CA-Ff-77 
1 5 0Wc^2tlfe«cf4, lI«ai7'P7 7%i 

[00 11]H5(4, I C*-F^-y7l 5 OOrtSP© 
WWM^tEITfe§o ICA-F^77l5 0 
i4, SSI»Li5:5/:*©CPU 5 2 

0, T-$ {fuffyLfrSt!) *E*t«fcii>ORO 
M (Read Only Memory) 5 3 0, RAM (Random Acces 
s Memory) 550, EEPROM (Electrically Erasa 
ble Programmable ROM) 5 4 0, Bf^/H^fclt 
a*«C*afc*©B|-tn7n-fe«y9-5 6 0, Sci'^gp 

gg r- ^ *]MSfi 1 5 fc ft © y y 7 ;W y * - 7 x 

-X5 7 0 t?:tU. LinP.(4, 8 OtCj; 

^Tll?ti5 0 1 CA-F^y7l 5 014, B|^n7 
a-tr-y-9-5 6 0£m>T, *7 h«S 1 0 5frS£ft£ 
ti/:3?y FAPDUKttJST y r-f Sttffl^fTf 

§o Bf^n7n-b-y9-5 6 0 (n-F7x7) Off 
t><9t, CPU 5 2 0^7n^'7A (77h7x7) £ 

[0 0 12] I CA-F^-y7l 5 0t4, lia©77U 
^—73 y^ROM530feL<(4EEPROM540 
rtfcfi#1"S 0 tit, 77y^-^ayfcHWOr-* 
ffig^ EEPROM530RtfRAM550 tWfflf 
5tffi$nfc#^tt, Fire WallCt^ftSV^T 

V\ Sfc, I C*-Ff-77°1 5 0(4, ICA-FVy 
^-7x-<X$!jfPlH]Sl 0 0frt.fWn?c3Y>KA 

PDut<t?)77y^— >3y, r-^, Rtfwaflfg 
^MlRtfft^TSo ^, 77u^-y 3 y^©sg, 
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yi50{i> I C#-FVy*-7x^XS!lffllI§lffil 0 
0 A^^frSnfcaw F A P D U t <fc !? 77 U 

a y ©aft* fe c 4 5 8iti£8o c fc t t? f s c 

[0 0 13] I C*-F^>y7l 5 Otli, 7 

7°'J ^—>3 XOSKUME^ffl^-rs^b-r^ yy" 

ULTOS (MULTOSttMondex Inter 
na t i ona 1 ©Silj§S7?$ D s MAOSCOny 

y - y 7 l x\m<omm. tf 7 -r fe y x <d ta^$3 c & 

01^1-^1/— T4y9 9 s7o- A 1 3 0ttt©«I:3 

[0 0 14] BUfcSoTSttBfc&tta. 
y^>XfA13 0ii, 3T>KAPDU*S^«fi 
fc, g£3ft£ftTVS77 , U$--S'3>l 6 0fctt 
L, a£j3*nTtfc3VyFAPDU*S-r. fcJEU 
nvy FA P D Utf 77'J fr-f 3 y©B«RtfffllBfR 

>16 0f±, ^Iz-f-r^XfA 1 3 0fc<fct>& 
SftT^fcavyFAPDU^MU 77U^-y3 
yll^C^-try M 6 1 X&77U^-y 3 yftil© 
*^fey h 1 4 3icji5 0 77V>r-\ i/ay#m<Dtirfi 
■fey M 4 3 i:(±, la^i-^^^Hli'Tl.^t^vgi: 
ft3^^*#tr^-fe-y b&tfW I Mf^-fev F3W 

tf7yjy->3^0^:y H4 3(i, ttfflRH 
Stfgltiffi^tfftSteftfcE F (Elementar 
y File) 16 5^07^-fe7sA^$tlTl/^ 0 7 
yy^-ygygl^^Hrtry h 1 6 1 RXfYfVfr- 
'>3y»)^-l!-y P- 1 4 3te, nvvFAPDU* 

#XM»88l 0 5KjITo 

[0 0 1 5] mm3-^*Mi, ISO/IEC 781 
6t*5^TS£^nTfcD^ D F (Dedicated 

Fi le) feb<a77°u^-— >3>tisawtas% 

77-bX?g%}f«t§St|T-$§o COSMUCtt), 

oiaat^tff&iEStts i cjb-Ftfflo^ns^u- 
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6 

^ y95/7>Tk£ LTteMU L T 0 S 0 S S^St 
[0 0 16] H2ti, Wi*+*;l/"fel/** 1 2 0<D|*J 

a5«fig^LfeBi-psso fia^*;Hri^* 1 2 o 
it, APDu-tu^^2 1 o, i^af-^i/ta^ya 

-;V2 2 0, APDU»>*a-;l/2 30, tta^Y 
*;MPlr-^;I/2 2 3%*«LfcRAM2 2 1,Stf 
APDU^Sf-^2 2 3**MflLfeEEPROM2 
3 1 APDU-feUyy 2 1 (Hi, SIS^-V 

1 0 *;I/fiffE S? ' a 2 2 0 & tf A P D U g&€ y* a 
2 3 0 fcjgfcSn, I C*-hV>*-7i^^«Hl@ 
SSI 0 0 cfcD§ftL7c3vy FAPDUWiJSiJt, SL 
fc*S?a-;l/k:fflg*fti:ftfc#5afliRtf I C * - F 

1 5 ofrp>©b7^yx£i c*-F-ry^-7x-r7N 
tv ; n.-;b2 2 ott, mmi-^^)i(D^mR^mm^ 

£lft5o R AM 2 2 llctt, SttSPJfliSftT^SIIffl?- 

t^ia^+^s-^ ijftr^nT^§77u^— > 
20 3 y & t; 7 y u y 3 ynnwmmm? * 

*;l/f 8t-7>2 2 3fcL«tlW§o t&Sf- 
t^ilt^i-il/Z 2 Oii, R AM 2 2 1 £IK 

nfcfta^^tar-y;^ 2 3©fif$a%*ML 

- y 3 y ©*fr ttS k , «SS AWft t k 1 © 7 7 U 'T 
-y 3 y**3fefT?nfcfrtov^TOttfflli»35«. 

[0 0 1 7] APDU^&ya-;!^ 3 Oii, IC* 
-FVy^-71-YXMlHlKl 0 0fr53£5ftT#fc 
37>FAPDUOfl, 77V*-i'ay<Dm%7Uc 

30 i!ii-rs*,©fo^T, na^+^^oa^nstsfc 

feting* 6(f 1 f@W±©3Ty f A P D UfciMSnr 
tfcnvyFAPDUKffi^LTI CA-F^y7l 5 

o fcgf t5«^*Jf o 0 d©-ao5/-^yxo*i? 

X7-f^Lft^ A P DUg^y'a-;l/2 3 

oti, -y-^-yx®a^*±L, ic*-F^y*-7 

x-fX0JiP0S§l 0 OtCfOimSo EEPROM 
2 3 1 Kit, nvy F A P D U fcftjS L 1z—M<D iz—'r 
yZtfh P DUlif-7> 2 3 3 t LXM&tlTlS 
t), APDUgi^-;l/2 3 0(i, APDUS^T 

40 -7;l/2 3 3©rtg£g-3tia&£fci:ft5o 7c7£b, 

a p d ummmm^mmcmmr^ ^ e e p 

ROM2 3 l£Cn50fll«*iaBb*<TtSV^ A 
PDU^r-7;l/2 3 3£*#g|3.5fci&£, Wffl© 
a-ryFAPDU^fflScLTfeii/^o S/c, 
it! CA-K^7 7l 5 OO-tz+aU'T'CMa^fOffl 
Ltai\ APDU£»r-7;U2 3 3l4, A73©n 

®?**Arkis9# 1 2 otf&s-r * e> 

ti^o fiHAlfv APDU^Kr-7;l/2 3 3*\ A7J© 
50 n vy F A P D U KjSUfcfV by F 'J +iifi^ t S fc 
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S, A P D Ug&T-7>2 3 3 <0*tgt*fcJ\ tt&t 
[0 0 18] H 3 SI® 4 (4, 3ilf-+*;KO^*9Rff 

TyKAPDU*S#T5 (3 11) fc, Ha^*;l> 
■fel^l20(4, 3WKAPDU!Wttl^+*;I^ 

^Sfr^fr^Wfr^o mm^^^)i^^it i 

S 0/ I E C 7 8 1 6 fcfcfrSMAHAGE CHANNEL 10 
openSfclBSt § I C*-Kffl^Tfe5 (3 3 

i) c fia^*;H^s<Dii£, t™a^*;Hfa 

*5>a-;l/2 2 0(4, §Saf- + *;l/§ar-7;l/2 2 3 
BfTS (3 3 3) c Ha?-i'*;l/fi:Sttffc5fc^ Ira 

a^+^nzu** 1 2oii, s^Ti^fia^^^ 

©55 0*Bfc<-#gV#^4l C*-FW*-7x 
•YX0J^IHE§ 1 0 OfcaSfflfS (3 3 7) o 
ia^*;t/tf&Wl£fct4, tt!*+*;HzU** i 
2 0(4, X7HI3fciftaf-+*;l'ftW*^H* , te i ;> 20 
hb, I C#-F^>£-7x^7»[II^l 0 OfciM 
fit?) (3 3 5), I C*-K-Cy*-7x-<^#J«I|Hl 
Eg 1 0 0 (4, gflbfdlf *jM 1 0 5 (3 
13). HWFAPDU tfH9?-+*;l^fi*fcT?ft 

v^&S, HSf-v*M:U2* l 2 014, na^*;v 
a?ssfr h 5 tpzmt %o mm^^mn^ t 

(4 I S 0/ I E C 7 8 1 6 fCfettS MANAGE C H A N N E 
L closeSfcfSiltS I C*-FffiST&3 (3 3 
9) c fraa^*;«S©ii£(c{4, na***^ 
•fel^*12 0(i, 3V>FAPDUTf|£?nfciia 30 
^+^;W^^tiTi^^H'5A^¥iJ»f-r§ (3 4 
1) c ^2tlT^5iI£tt, t&af- + *;HzU** 1 
2 0(4, lma^-V^;Haf—7;b2 2 3 3b^S£5tl 

fctia^+*;l/£ill»U I c*-F^y^-7x^x 

sijfp@j§i o ofcamts (3 4 5) 0 wm^^iw 

^^ftx^ftWia-Jcte, na^+*;i/-feu** l 2 

0(4, ?ff)|^i7-aT»f5 (3 4 3) „ S 

tstWT^n^u 3 1)„ 

[0 0 19] &8££ttT^58S§tf I CA-Ff-771 40 
5 0 ©&©!£, i§a^+*;l/(cMb&^S(4 I C£ 
-F^7 7°l 5 Csfc&fSnSo A-FHtsl 1 Ofc 
I C#-F^'y7l 5 0, I Ci-FVV?-7x^X 
«@Sgl 0 0, RtfliSf-+*/I/-feU** 1 2 OfcWI- 
tnvy F A P D U£§ttTiMW$SfM«$nT 
fet), fcoiia^+^MrU** l 2 0^9fiLfcnv 
:/KAPDUtfi&a^ + *;Mzl'** 1 2 0tSg?n 
TV5J§£, Sia^ + ^HrU** 1 2 OttiiiPftg^ 
^fcHtSn^KAPDU*, iiiP?nfe«ffitSSM 

ltui\ s/c, iiijp^n/£S§5tat^^i so 
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u mmm^i ca-f^^i 5 otast ut 
tav\ cc-eats^, iraa^^*;i/watit 

5St)ifin«t§SL)W©S£}§b, MM§§S 

s«t5o as^nfc^o^, sta^*;w?i^ 

* 1 2 0(4, fi&OfflSg^S^StlTVSA^^^ffiS 
b (4 4 9) , SfcLT^ftl^Btf (4 5 1),*© 
g**XMSffil 0 5t3SMt3 (411). ffi©$l#§ 
*^^tiT^§tl^|^af-v*;l/-t?b^^ 1 20 

14, ^©aStnvvFAPDU^^ta (4 5 

3) „ mi, mmmmm^-^z^utz 1 2 0 

0«Hg^j^LTt>J:V\ fflOStltnv>FAPDU 

*sarrs#&, cin5oa8gt.^a^-v*;i/£it)W 

[0 0 2 0] 3vyKAPDU#SgteftfclfMtt?;S:^ 

ti^na^-v^^b^^ 1 2 oaiBSTStifcBs?- 

(4 3 3) „ ii£snfc!fta?+*;^ftB8?£nT 
i^sna^**^©^ na^+*;H*u** 1 2 0 
£4, 3v>h*APDU*I C*-H^y^l 50tK3S 
f* (4 3 5) „ fcfcU 3V>FAPDU ^SELECT A 
PPLICATIONST\ Htft&©Haf-+ * o Tffiffl 

>^s©ia^^^;wcj;-pTraB#fc^T?n*v^ 

fcffSf U^jft 77U^—>3 Vfttf** h77U^ 
-i/a^cnSWbSftStf^OHOTtta^o 1 c 
*-F^y7l 5 0(4, cOJ^yFAPDUWJ? 

u gfrts (4 8 1) o Jig^n/cna^+^^^u 

* 1 2 cm, ffizsnrcTWr-z/aymtvibTm 
mftrc&<D-z%%ftE5frmmt% (437) „ c 

©if^Ima^ + ^/Mrl^ 1 2 0(4, SELECT APPLIC 
ATIONS£)£ffib (4 3 9), I C*-K 1 5 OfiBt? 
3V> FAPDU^fflatffrfcftS (4 8 3) . 

15, ttSf-t *;Hr 9 1 2 0(4, §ffb/£3V>F 
APDU^rl C*-F^>y7l 50ti|g)Mb (4 4 

7) , ravyKAPDUCffiatffcilfcfcnS (4 9 
1) o 77°U'7--^3>'^KfclS??n/ct)©T-S§iI 
Ha^+*;H*b^* 1 2 0(4, WRITE STATIC 
^(441), SELECT APPLICATIONS (4 4 3) , 
READ STATICS (4 4 5) ^HtMfb, I CA-F 

^■y7i5 0{4, cftefcjBtaagts (4 8 5, 4 8 

7, 4 8 9) o WRITE STATICSt(4, I Zij-Yf-V 
71 5 0©llftfi£?n^77U^-^3>W#t§ 
-Bfr-££EEPR0M5 4 0(c#tiity/cJ6©ST-fe 
13, READ STATICS t(4WRITE STATICSTEEPR0M5 

4 0 {cUfezwtnu >J*m 550 t Et 

ST'feSo fcfcb, I C A— F-O^— 7x-fXMIP 
[hISS 1 0 0 J: D8fr£ftfc*MWSELECT APPLICATIONS 
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y-^3>s#3v> fa pd ufflatu^c:ne.#^fc 

I C*-F*-y7l 50*«fcD»*J:<Sl!T!t 
So COSI, Sta7^*;HzL^£ 1 2 0(4, §€bfc 
awFAPDU*] C#-F?-77l 5 0icta9£L 
(4 4 7), (4 9 1). I C#-FV7*- 

7x-fxW0SSi 0 0<fcD§Mbfc3V7FAPDU 
J^03V7FAPDUfcl!Ilt5J&&fct ICA-K-f 

y^-7x-rx$ijai0ssi oot^ft^w, ms^-v 

Ha^-v*;Hrl/^^ 1 2 0(4, §{f bfc 
rax^FAPDUCjSgtbT, ^TMb/cX^- 
n-F£, £®&5lf$»£fee:fc-3;fc&£ I CA-F 
^>^-7i^XitiJII@Bi 0 0 fciSTo 

CO 0 2 1] Ha^ + ^HJl^* 1 2 0<DfitrI(4, I 
C*-Kf-v^l 5 0 t I C*-FV>^-7x-i'^a 

fflnnsgi oooHtK?)4^o na^+*;H2U^^ i 

2 0 14, W]tf3^HAPDU?$!), [IJitfnvv 
FAPDU7&3 4: 5 4ffilEO«mtE1ItS C fc , 
n V7 F 7 * - v 7 F Sft § 5&tttf $ Sif^fctt 

V\ CO«Bf{±, «FB10 5^ fcb<£4*7F 
41$ 1 0 5fc*-FHBl 1 0O|BtWA*n«» 31 
7n F b < Ji3*^*}g«*oafflt**ca5 * 

881 1 0*|&gf-+*;bfc±oTW!Lfcl/M|£l«:H\ 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the lnvention]This invention relates to the host equipment in which the host equipment 
which can insert the memory storage which has a security function, and its memory storage, 
and memory storage were inserted, It is related with the terminal unit with which the host 
device which can insert the memory storage which has a controller which manages a logical 
channel especially, and its memory storage, and its memory storage were inserted. 
[0002] 

[Description of the Prior ArtJAn IC card embeds IC (integrated circuit) chip into a plastic card 
board, and has an external terminal of an IC chip in the card-face side. A power supply 
terminal, a clock terminal, a data input/output terminal, etc. are contained in the external 
terminal of an IC chip. The IC card operates by carrying out direct supply of a power supply or 
the driving clock via an external terminal from the host device connected with an IC card. An IC 
card exchanges information with the connected host equipment by transmitting and receiving 
an electrical signal between host equipment via an external terminal. As a result of information 
exchange, an IC card performs sending out of a calculation result or memory information, and 
change of memory information. The IC card can have the function to perform security 
processings, such as security data protection and personal authentication, based on such 
operation specifications. In the system for which the security of extra sensitive information, 
such as credit settlement and banking, is needed, the IC card is used as a user device for 
identification. 
[0003] 

[Problem to be solved by the invention]The IC card which is not supporting the logical channel 
when two or more applications are carried in IC card chip. Or in the IC card which carries the 
operating system for IC cards which is not supporting the logical channel, it is difficult to make 
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two or more applications cooperate and to operate them independently, simultaneously. 
[0004]Although it is also possible to use commands other than the command specified by 
ISO/IEC7816, the command to an IC card, If the command which is not specified by 
ISO/IEC7816 is used when OS in an IC card operates the system of a logical channel, only the 
application in an IC card can be operated in the logical channel which is a system which can 
operate two or more devices simultaneously. 

[0005]The purpose of this invention is to operate simultaneously independently two or more 
applications carried in the IC card, and is improving the convenience of an IC card. 
[0006] 

[Means for solving problem]ln order to attain the above-mentioned purpose, let this inventions 
be the 1st memory that performs security processing of data, a control device which controls 
the 1st memory, and the memory storage which has the 2nd memory that gives the function of 
a logical channel to memory storage. 

[0007]The 2nd memory may perform processing of a logical channel, when the command 
about a logical channel is included in the command from the host equipment connected to 
memory storage. 

[0008]The 2nd memory is good also as composition which has RAM and ROM. In this case, 
the command by which the 2nd memory writes RAM data in EEPROM, processing of a logical 
channel may be performed using the command which returns the data written in EEPROM to 
RAM, and the command which changes application with an operating system - to a pan the 
2nd memory, The module which has been sent from host equipment when the command about 
registration application is included in the command from host equipment and which usually 
changes a command into a pseudo-instruction, It may have a module which changes into a 
false application selection command and a false application selection end instruction the 
application selection command sent from host equipment. 

[0009]The application stored in the 1st memory, A means by which a command judges what 
has been sent from other applications stored in the 1st memory, and the thing sent from the 
2nd memory, It may have a means to process the command sent from other applications, and 
a means to process the command sent from the 2nd memory. 
[0010] 

[An invention embodiment] Drawing 1 is a figure showing composition of the carding machine 
machine 1 10 which applied this invention. The carding machine machine 110 comprises the IC 
card interface control circuit 100, the logic channel selector 120, and the IC card chip 150. The 
IC card interface control circuit 100 controls the IC card chip 150, and controls transmission 
and reception of the command APDU between the host equipment 105 and the logic channel 
selector 120. The logic channel selector 120 is connected to the IC card chip 150 and the IC 
card interface control circuit 100, A logical channel controlling function is provided to an 
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operating system for an IC card and IC cards which is not supporting a logical channel, and a 
command is distributed to other apparatus which receives the command APDU. A flash 
memory chip, RAM, etc. correspond with other apparatus here. After the command APDU 
corresponding to these apparatus changes the command APDU received when necessary, it is 
handed over by controller which controls these apparatus. The command APDU is a command 
format and a command for IC cards for IC cards based on ISO/IEC7816 standard. The IC card 
chip 150 is a microcomputer chip embedded into a plastic plate of an IC card. An external 
terminal, an electrical signal protocol, and a command which the IC card chip 150 has are 
based on ISO/IEC7816 standard. There are a power supply terminal, a clock input terminal, a 
reset input terminal, an I/O input/output terminal, and a ground terminal in an external terminal 
of the IC card chip 150. The IC card interface control circuit 100 directs execution of an 
operation required for security processing demanded from the external host equipment 105 by 
publishing an IC card command from an external terminal of the IC card chip 150 to the IC 
card chip 150. The IC card chip 150 is connected with the logic channel selector 120. 
Composition shown in the IC card chip 150 of drawing 1 shows a logical functional block, and 
does not show a physical configuration. 

[001 H Drawing 5 is a figure showing a physical configuration inside the IC card chip 150. The 
IC card chip 150, Data processing. ROM(Read Only Memory) 530 for memorizing CPU 
(microcomputer) 520 for carrying out, and data (a program is included), RAM(Random Access 
Memory) 550, EEPROM (Electrically.) It has the serial interface 570 for transmitting and 
receiving the code co-processor 560, and an external device and data for performing 
processing about Erasable Programmable ROM540, and a code/decoding. These are 
respectively connected by bus 580. The IC card chip 150 performs security processing 
corresponding to the command APDU transmitted from the host equipment 105 using the code 
co-processor 560. Instead of the code co-processor 560 (hardware), CPU520 may use a 
program (software) and may perform security processing. 

[0012]The IC card chip 150 saves two or more applications in ROM530 or EEPROM540. A 
data area peculiar to application is secured in EEPROM530 and RAM550. As for each secured 
field, it is desirable to be protected by a mechanism like Fire Wall in which interference is not 
allowed mutually. The IC card chip 150 registers and erases application, data, and 
management information by the command APDU published from the IC card interface control 
circuit 100. As for registration of application etc., and processing of erasion, it is desirable to 
determine propriety of execution of the processing by access authentication. The IC card chip 
150 can also have a function which chooses application by the command APDU published 
from the IC card interface control circuit 100. 

[001 3]lt is desirable to carry an operating system which provides a function preselection 
capability of application in the IC card chip 150. As an operating system which provides such a 
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function, MULTOS (MULTOS is a registered trademark of Mondex International and) It is the 
operating system for multi-application type IC cards with which determination of specification 
and management of a license are performed by a MAOSCO consortium. OS etc. correspond. 
The operating system 130 shown in drawing 1 may provide such a function, and may not be a 
general-purpose operating system. 

[0014]lt returns to drawing 1 and explanation is continued. The operating system 130 will pass 
the transmitted command APDU to the application 160 chosen now, if the command APDU is 
received. However, in a command by which the command APDU is processed with operating 
systems, such as registration of application, deletion, starting, and selection, the operating 
system 130 performs processing corresponding to the command. The application 160 
distinguishes the command APDU sent by the operating system 130, and sends it to the 
instruction set 161 peculiar to application, or the instruction set 143 common to application. In 
the instruction set 143 common to application, an instruction set including a command etc. 
which are needed when realizing a logical channel, a WIM instruction set, etc. correspond. As 
for the instruction set 161 peculiar to application, and the instruction set 143 common to 
application, access to EF(Elementary File)165 in which key information, certification 
information, etc. were stored is allowed. If the command APDU is received, the instruction set 
161 peculiar to application and the instruction set 143 common to application will perform 
processing according to it, and will return a processing result to the host equipment 105. 
[0015]The logical channel is specified in ISO/IEC 7816 and is the function to provide DF 
(Dedicated File) or application with an independent accessing means logically. With this 
function, the IC card can provide two or more services simultaneously. However, in order for 
an operating system to provide this function, It does not become, if the processing speed of the 
system by which the operating system operates, and memory space are not enough, and in 
the operating system used for the IC card to which the function of a system, etc. are restricted, 
the logical channel may not be provided as a function. MULTOSOS etc. correspond as such 
an operating system. 

[00161 Drawing 2 is a figure showing the internal configuration of the logic channel selector 120. 
The logic channel selector 120 has inside of RAM221 which stored the APDU selector 210, the 
logical channel administrative module 220, the APDU conversion module 230, and the logical 
channel management table 223, and EEPROM231 which stored the APDU translation table 
223. The APDU selector 210 is connected with the logical channel administrative module 220 
and the APDU conversion module 230, It has the function to return the function and the 
response from IC card 150 which distinguish the command APDU received from the IC card 
interface control circuit 100, and make it process to the suitable module to the IC card interface 
control circuit 100. The logical channel administrative module 220 performs reservation and 
release of a logical channel. The logical channel number used now, the number of logical 
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channels opened at once, the logical channel number reserved, the application number 
opened now, the application executed situation, etc. are stored in RAM221 as the logical 
channel management table 223. The logical channel administrative module 220 processes 
reservation of a logical channel, etc. using the information on the logical channel management 
table 223 stored in RAM221. The executed situation of application is the information about 
which application was performed after powering on. 

[0017]lnside of the command APDU to which the APDU conversion module 230 has been sent 
from the IC card interface control circuit 100, It has a function which complements to the 
command APDU to which the one or more commands APDU will have been sent if necessary 
in order to realize a function of a logical channel, and transmits to the IC card chip 150 about a 
thing about a change of application. When an error etc. occur in this sequence of a series of, 
the APDU conversion module 230 stops sequence processing, and tells that to the IC card 
interface control circuit 100. A series of sequences corresponding to the command APDU are 
stored in EEPROM231 as the APDU translation table 233, and the APDU conversion module 
230 changes into it based on the contents of the APDU translation table 233. However, when a 
function of APDU conversion can be realized uniquely, it is not necessary to store these 
information in EEPROM231. In order to rewrite the APDU translation table 233, the command 
APDU for exclusive use may be prepared. Security processing of the IC card chip 150 may be 
used for this rewriting. The processing is directed by the command APDU of an input, and the 
APDU translation table 233 is rewritten by a method which the logic channel selector 120 
specifies. For example, when the APDU translation table 233 takes directory structure according 
to the command APDU of an input, rewriting of the APDU translation table 233 is equivalent to 
rewriting of a corresponding directory. 

[0018] Drawing 3 and drawing 4 are flow charts which show processing when access is 
performed from the host equipment 105 using reservation of a logical channel, and two or 
more logical channels, the IC card interface control circuit 100 to the command APDU - 
receiving (31 1) - the logic channel selector 120 judges whether the command APDU is a 
logical channel reservation command. A logical channel reservation command is a command 
for IC cards equivalent to a MANAGE CHANNELopen command in ISO/IEC7816 (331). In a 
logical channel reservation command, it is judged whether the logical channel administrative 
module 220 still has an opening in a logical channel with reference to the logical channel 
management table 223 (333). If a logical channel has an opening, the logic channel selector 
120 will transmit a number young No. 1 except zero to the IC card interface control circuit 100 
among vacant logical channels (337). When there is no vacant logical channel, the logic 
channel selector 120 sets that a logical channel does not open in an error signal, and transmits 
to the IC card interface control circuit 100 (335). The IC card interface control circuit 100 sends 
a received value to the host equipment 105 (313). If the command APDU is not a logical 
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channel reservation command, the logic channel selector 120 will judge whether it is a logical 
channel release command. A logical channel release command is a command for IC cards 
equivalent to a MANAGECHANNEL close command in ISO/IEC7816 (339). In a logical 
channel release command, the logic channel selector 120 judges whether a logical channel 
specified by the command APDU is reserved (341). When reserved, the logic channel selector 
120 deletes a logical channel specified from the logical channel management table 223, and 
transmits to the IC card interface control circuit 100 (345). When a logical channel is not 
reserved, the logic channel selector 120 notifies that as an error (343). When a command 
differs also from reservation of a logical channel, and release, it is usually judged as a 
command (431). 

[001 9]A command in which apparatus connected is not related with a logical channel only in the 
case of the IC card chip 150 is transmitted to the IC card chip 150. Apparatus which operates in 
response to the command APDU in addition to IC card chip 150, IC card interface control 
circuit 100, and logic channel selector 120 in the carding machine machine 110 is carried, And 
when the command APDU which the logic channel selector 120 received is registered into the 
logic channel selector 120, the logic channel selector 120 may transmit to apparatus to which 
the command APDU about a future-equipment command was added. A command may usually 
be transmitted to added apparatus and a future-equipment command may be transmitted to 
the IC card chip 150. A command refers to commands other than a command about logical 
channel management, and a future-equipment command, and a future-equipment command 
usually means here a command registered into the logic channel selector 120. In a registered 
command, the logic channel selector 120 checks whether other apparatus is connected (449), 
and if it does not exist (451), that will be transmitted to the host equipment 105 (41 1). when other 
apparatus is connected, the logic channel selector 120 transmits the command APDU to the 
apparatus (453). If the logic channel selector 120 is contained in other apparatus at this time, 
the command APDU may be distributed and it may transmit to another apparatus. Also as for 
these apparatus, when transmitting the command APDU to other apparatus, being managed by a 
logical channel is desirable. 

[0020]when it is not the command in which the command APDU was registered, the logic 
channel selector 120 judges whether it is that as which a specified logical channel is chosen 
now (433). When a specified logical channel is a logical channel chosen now, the logic channel 
selector 120 transmits the command APDU to the IC card chip 150 (435). However, an error is 
returned when the command APDU is already used by other logical channels with a SELECT 
APPLICATION Command. Usually, although it is desirable not to perform simultaneously by two or 
more logical channels as for application, it will not be the limitation if application and host 
application accept this. The IC card chip 150 interprets and executes this command APDU 
(481). when a specified logical channel is not what is chosen now, the logic channel selector 120 
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judges whether specified application is chosen for the first time (437). In this case, the logic 
channel selector 120 transmits a SELECT APPLICATION command (439), and processing of 
the command APDU is performed by the IC card 150 side (483). Then, the logic channel 
selector 120 transmits the received command APDU to the IC card chip 150 (447), and 
processing of the command APDU is performed (491). When application is already chosen, 
The logic channel selector 120 publishes a WRITE STATIC command (441), a SELECT 
APPLICATION command (443), and a READ STATIC command (445) in order, and the IC 
card chip 150 processes these in order (485, 487, 489). A WRITE STATIC command is a 
command for writing in EEPROM540 temporary data which application specified now [ of the 
IC card chip 150 ] holds, A READ STATIC command is a command which returns a RAM 
image saved with a WRITE STATIC command EEPROM540 to RAM550. However, when a 
command published from the IC card interface control circuit 100 is a SELECT APPLICATION 
command, processing of Step 447 is omitted. Although application may perform processing 
which corresponds to these commands before and after each command APDU processing, 
when this technique is used, the IC card chip 150 can be managed more efficiently. Then, the 
logic channel selector 120 is transmitted to the IC card chip 150 (447), and processes the 
received command APDU (491). It is not transmitted to the IC card interface control circuit 100, 
but a response about commands APDU other than the command APDU received from the IC 
card interface control circuit 100 is processed by the logic channel selector 120. When an error 
occurs, if the logic channel selector 120 is necessary, after it will change, it returns an error 
code generated inside to the IC card interface control circuit 100 as a response of the received 
command APDU. 

[0021]A position of the logic channel selector 120 is not restricted between the IC card chip 
150 and the IC card interface control circuit 100. The logic channel selector 120 can be 
arranged at arbitrary places of as [ which is the command APDU / whose an output is the 
command APDU ], although command formats differ, when compatible, may change a 
command format and may be used. A card reader writer etc. which change a communications 
protocol or connector form where this place is inserted between the host equipment 105 and 
the carding machine machine 110 in the host equipment 105 etc. correspond. It is desirable to 
install the logic channel selector 120 in the host equipment 105 to manage two or more carding 
machine machines 1 10 by a logical channel. 

[0022]Usually, although application stored in the IC card chip 150 is independently accessed 
with an external instrument using a logical channel, there is a case where he would like to 
perform data communications between applications, without taking out data to the exterior of 
the IC card chip 150 which is the Tampa-proof field. Processing of payment of electronic 
money, payment, etc. in which this was specifically stored in application with a function of an 
electronic purse corresponds. 
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[0023] Drawing 6 is a flow chart at the time of realizing processing mentioned above. Hereafter, 
it explains, also quoting the description of drawing 1 . When the logical channel different from 
the logical channel chosen in Step 433 of drawing 4 now is chosen, as for the logic channel 
selector 120, it is judged next whether it is selection of registration application (61 1). When it is 
not selection of registration application, a 437 or less-step step is performed. In the case of 
registration application, the logic channel selector 120 publishes a false application selection 
command to the application 160 chosen now [ of the IC card chip 150 ] (613). A false 
application selection command is a command which changes the application selection 
command (it is equivalent to the SELECT APPLICATION command in ISO/I EC 7816) 
published by the host into the form which each application in the IC card chip 150 understands. 
As for an application selection command, in the usual use, it is desirable for the system each 
application controls application like an operating system rather than processes to receive and 
perform. However, it is better for an application selection command to make an operating 
system bypass, and to be able to transmit to application, when performing an internal call of 
application. This invention provides this function. 

[0024]lf this command is received, the application 160 will be changed into the inside call 
instruction of application, and will call the application 190 (651). The called application 190 
judges whether it is having acted the internal call as oneself (681). In the call from an inside, 
APDU processing for an internal call is performed (683), and, in the call from the outside, 
APDU processing for an external call is performed (685). It judges whether its call is a call from 
an inside, and whether the application 190 is the call from the outside (operating system 130), 
and has a function which divides processing. It is judged to a false application selection 
command whether this is received or not. With this function, it is decided how it communicates 
between applications. For example, as for the usual application, it is desirable to be set up not 
receive invoking. As for application like electronic money, it is desirable to be set up so that it 
may be called only from the application registered into electronic money application. 
[0025]Via the application 160, it is transmitted to the application 190 and the usual command 
(615) below a false application selection command is processed (687). (653) Specifically, the 
format of the sent usual command is changed and called using an internal call instruction. The 
internal call is valid until other applications are chosen. The host equipment 105 may publish 
the command APDU which performs one or two or more processings between the application 
160 and the application 190 ignited by a false application selection command. The operation 
etc. which purchase goods, such as attestation between applications and an electronic ticket 
which used electronic money, correspond to this. 

[0026]By the case where an application selection command is published, when the selected 
application is the application by the side of a call (617), a RETURN command is published 
(619). The call side application ends invoking, taking advantage of this opportunity, and the 
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command received henceforth processes it as a command for application 160. When other 
applications are chosen (621), Transmit a RETURN command (623) and a call is ended (657), 
Next, it processes by publishing a WRITE STATIC command (625), a SELECT APPLICATION 
command (627), and a READ STATIC command (619) in order (659, 661, 689). Processing of 
a call may become an embedded structure. In [ and capacity of RAM cannot fully secure by 
restrictions of the operating system 130 and the IC card chip 150 in that case ] the time of an 
application change, In the case of the temporary data and the register about the before 
selected application not being held. Before calling application, these data is evacuated to 
EEPROM540, and the temporary data and the register which were evacuated to EEPROM540 
are restored after the re-call of application. However, when the internal call is not accepted in the 
specified application, internal call processing cannot be performed but it is processed as an 
external call. At this time, an external call may not be performed but an error may be returned. 
[0027]A function of a logical channel is applicable besides IC card chip 150. Other systems 
using a support of MultiMediaCard ("MultiMediaCard" is a registered trademark of 
InfineonTechnologiesAG) or a logical channel correspond to this. A format of a command 
which is sent to the logic channel selector 120 and the logic channel selector 120 publishes when 
not using the IC card chip 150 as one of the devices, It may use except a command APDU 
format of a command for IC cards specified by ISO/IEC7816. However, if a command set has a 
command for IC cards, and compatibility and it has a command format convertible into an IC 
card command and a response, The IC card chip 150 can also be used by inserting command 
conversion equipment between the logic channel selector 120 and the IC card chip 150. when 
performing common processing in two or more applications, such as a command about the 
APDU selection modules 140 and 192 and a logical channel, a system applicable to the 
operating system 130 may mount this function. 

r0028] Drawing 7 is a figure showing the example which serves WAP (Wireless Application 
Protocol) using the carding machine machines 710, such as the host equipment 105, such as 
a personal digital assistant, and a SIM card. The carding machine machine 710 operates as 
WIM (WAP Identity Module) which performs security processing. WAP is the specification 
defined in WAP forum for the application which gives its service on a wireless communication 
network, and is the specification defined for the application which performs security processing 
on WAP in WIM. The application 760 in the IC card chip 150, It has the function to perform 
WIM application and this is divided into the command 743 for WIM, an application selection 
related command, and the application command 161 with the APDU selection module 140 in 
the application 760. However, an application selection related command shall be included as 
an extended set of the command 743 for WIM. When application 790 is made into the 
application for electronic money, the application 790, as opposed to other application 770 grades 
registered into the application 790, It has a function which fluctuates the electronic money data 
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stored in EEPROM in the application 790, It has a function in which the contractor who had a 
function saved at the above-mentioned EEPROM by making into a log the exchange 
performed at this time, and published applications 790, such as a bank, performs reading and 
elimination for the above-mentioned log, and a function which fluctuates electronic money 
data. It can process by using an internal call of application, without taking out confidential 
information, such as electronic money data, outside. 

[0029] Drawing 8 is a figure showing the case where carry the IC card chip 150 and the flash 
memory chip 860 in MultiMediaCard(following MMC) 820, and these are controlled by the logic 
channel selector 120. The controller chip 850, The MMC external terminal 830. The MMC 
interface control circuit 853 to control, the IC card interface control circuit 100 which performs 
control of the IC card chip 150, the flash memory control circuit 855 which performs control of 
the flash memory chip 160, the logic channel selector 120, and these. The controller module 
857 to control is comprised. The flash memory chip 860 is a memory chip which uses 
nonvolatile semiconductor memory as a storage, and reading and writing of data are made by 
a flash plate memory command. The MMC external terminal 830 comprises seven terminals, 
and in order to exchange information with the external host equipment 105, it contains a power 
supply terminal, a clock input terminal, a command input/output terminal, a data input/output 
terminal, and a ground terminal. It has a logical channel for one or more flash memories, and a 
logical channel for other IC cards, they are changed by the logic channel selector 120, and the 
host equipment 105 is sent to each controller. By using this structure, application which 
cooperates mutually-independent and performs access of a flash memory and an IC card is 
realized. The structure of access to the IC card chip 150 and access to the flash memory chip 
860 can be communalized according to this structure. This structure is effective also when 
taking the composition which includes the IC card chip 150 in the controller chip 850. 
[0030] 

[Effect of the lnvention]According to this invention, the effect of improving the convenience of 
an IC card can be done so by giving the function of a logical channel to the operating system 
for an IC card and IC cards which does not support a logical channel. 
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CLAIMS 

[Claim(s)] 

[Claim 1]Memory storage comprising: 

The 1st memory that performs security processing of data. 

A control device which controls said 1st memory. 

The 2nd memory that gives a function of a logical channel to said 1st memory. 
[Claim 2]The memory storage comprising according to claim 1: 

A means by which said 2nd memory performs processing corresponding to a command about 
said logical channel when a command about a logical channel is included in a command from 
host equipment connected to this memory storage. 

A means to complement conversion of a command received from said host equipment and 
one, or two or more commands, and to transmit to said 1st memory. 

[Claim 3]The memory storage comprising according to claim 1 : 

A means to perform processing corresponding to a command about said logical channel when 
it has the 3rd memory corresponding to a command of a different system from a command 
inputted into said 1st memory and a command about a logical channel is included in a 
command from host equipment by which said 2nd memory is connected to this memory 
storage. 

A means to complement conversion of a command received from said host equipment and 
one, or two or more commands, and to transmit to said 3rd memory. 

[Claim 4]The memory storage comprising according to claim 2: 

The 1st command that writes data which said 2nd memory has RAM and EEPROM, and was 
stored in said RAM in said EEPROM. 

The 2nd command that returns data written in said EEPROM by said 1st command to said 
RAM. 

A means to perform processing of said logical channel using the 3rd command that changes 
application with an operating system. 

[Claim 5]The memory storage comprising according to claim 4: 

The 1st module in which said 2nd memory has been sent from said host equipment when a 
command about registration application is included in a command from said host equipment 
and that usually changes a command into a pseudo-instruction. 
The 2nd module that changes into a false application selection command and a false 
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application selection end instruction an application selection command sent from said host 
equipment. 

[Claim 6]As opposed to the 1st application with which said false application selection 
command was stored in said 1st memory, It is the command which performs an internal call of 
the 2nd application stored in said 1st memory specified with said false application selection 
command, The memory storage according to claim 5, wherein said false application selection 
end instruction is a command which terminates an internal call of said 2nd application to said 
1st application. 

[Claim 7]A means to judge that to which said 1st application was transmitted from what was 
transmitted from other applications with which a command was stored in said 1st memory, and 
the 2nd memory, The memory storage according to claim 6 having a means to process a 
command received from said 2nd memory, and a means to process a command received from 
application of others in said 1st memory. 

[Claim 8]The memory storage according to claim 7, wherein said 1st application has a means 
to change into one or two or more commands a command received from said 2nd memory, 
and to transmit to said 2nd application. 
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TECHNICAL FIELD 

[Field of the lnvention]This invention relates to the host equipment in which the host equipment 
which can insert the memory storage which has a security function, and its memory storage, 
and memory storage were inserted, It is related with the terminal unit with which the host 
device which can insert the memory storage which has a controller which manages a logical 
channel especially, and its memory storage, and its memory storage were inserted. 
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PRIOR ART 

[Description of the Prior ArtJAn IC card embeds IC (integrated circuit) chip into a plastic card 
board, and has an external terminal of an IC chip in the card-face side. A power supply 
terminal, a clock terminal, a data input/output terminal, etc. are contained in the external 
terminal of an IC chip. The IC card operates by carrying out direct supply of a power supply or 
the driving clock via an external terminal from the host device connected with an IC card. An IC 
card exchanges information with the connected host equipment by transmitting and receiving 
an electrical signal between host equipment via an external terminal. As a result of information 
exchange, an IC card performs sending out of a calculation result or memory information, and 
change of memory information. The IC card can have the function to perform security 
processings, such as security data protection and personal authentication, based on such 
operation specifications. In the system for which the security of extra sensitive information, 
such as credit settlement and banking, is needed, the IC card is used as a user device for 
identification. 
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[Effect of the lnvention]According to this invention, the effect of improving the convenience of 
an IC card can be done so by giving the function of a logical channel to the operating system 
for an IC card and IC cards which does not support a logical channel. 
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[Problem to be solved by the invention]An IC card which is not supporting a logical channel 
when two or more applications are carried in IC card chip. Or in an IC card which carries an 
operating system for IC cards which is not supporting a logical channel, it is difficult to make 
two or more applications cooperate and to operate them independently, simultaneously. 
[0004]Although it is also possible to use commands other than a command specified by 
ISO/IEC7816, a command to an IC card, If a command which is not specified by ISO/IEC7816 
is used when OS in an IC card operates a system of a logical channel, only application in an IC 
card can be operated in a logical channel which is a system which can operate two or more 
devices simultaneously. 

[0005]The purpose of this invention is to operate simultaneously independently two or more 
applications carried in an IC card, and is improving the convenience of an IC card. 
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MEANS 

[Means for solving problem]ln order to attain the above-mentioned purpose, let this inventions 
be the 1st memory that performs security processing of data, a control device which controls 
the 1st memory, and the memory storage which has the 2nd memory that gives the function of 
a logical channel to memory storage. 

[0007]The 2nd memory may perform processing of a logical channel, when the command 
about a logical channel is included in the command from the host equipment connected to 
memory storage. 

[0008]The 2nd memory is good also as composition which has RAM and ROM. In this case, 
the command by which the 2nd memory writes RAM data in EEPROM, processing of a logical 
channel may be performed using the command which returns the data written in EEPROM to 
RAM, and the command which changes application with an operating system - to a pan the 
2nd memory, The module which has been sent from host equipment when the command about 
registration application is included in the command from host equipment and which usually 
changes a command into a pseudo-instruction, It may have a module which changes into a 
false application selection command and a false application selection end instruction the 
application selection command sent from host equipment. 

[0009]The application stored in the 1st memory, A means by which a command judges what 
has been sent from other applications stored in the 1st memory, and the thing sent from the 
2nd memory, It may have a means to process the command sent from other applications, and 
a means to process the command sent from the 2nd memory. 
[0010] 

[Invention embodiment] Drawing 1 is a figure showing the composition of the carding machine 
machine 110 which applied this invention. The carding machine machine 110 comprises the IC 
card interface control circuit 100, the logic channel selector 120, and the IC card chip 150. The 
IC card interface control circuit 100 controls the IC card chip 150, and controls transmission 
and reception of the command APDU between the host equipment 105 and the logic channel 
selector 120. The logic channel selector 120 is connected to the IC card chip 150 and the IC 
card interface control circuit 100, A logical channel controlling function is provided to the 
operating system for an IC card and IC cards which is not supporting the logical channel, and a 
command is distributed to other apparatus which receives the command APDU. A flash 
memory chip, RAM, etc. correspond with other apparatus here. After the command APDU 
corresponding to these apparatus changes the command APDU received when necessary, it is 
handed over by the controller which controls these apparatus. The command APDU is the 
command format and the command for IC cards for IC cards based on ISO/IEC7816 standard. 
The IC card chip 150 is a microcomputer chip embedded into the plastic plate of an IC card. 
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The external terminal, electrical signal protocol, and command which the IC card chip 150 has 
are based on ISO/IEC781 6 standard. There are a power supply terminal, a clock input 
terminal, a reset input terminal, an I/O input/output terminal, and a ground terminal in the 
external terminal of the IC card chip 150. The IC card interface control circuit 100 directs 
execution of an operation required for the security processing demanded from the external 
host equipment 105 by publishing an IC card command from the external terminal of the IC 
card chip 150 to the IC card chip 150. The IC card chip 150 is connected with the logic channel 
selector 120. The composition shown in the IC card chip 150 of drawing 1 shows a logical 
functional block, and does not show a physical configuration. 

[001 1] Drawing 5 is a figure showing a physical configuration inside the IC card chip 150. The 
IC card chip 150, Data processing. ROM(Read Only Memory) 530 for memorizing CPU 
(microcomputer) 520 for carrying out, and data (a program is included), RAM(Random Access 
Memory) 550, EEPROM (Electrically.) It has the serial interface 570 for transmitting and 
receiving the code co-processor 560, and an external device and data for performing 
processing about Erasable Programmable ROM540, and a code/decoding. These are 
respectively connected by bus 580. The IC card chip 150 performs security processing 
corresponding to the command APDU transmitted from the host equipment 105 using the code 
co-processor 560. Instead of the code co-processor 560 (hardware), CPU520 may use a 
program (software) and may perform security processing. 

[0012]The IC card chip 150 saves two or more applications in ROM530 or EEPROM540. A 
data area peculiar to application is secured in EEPROM530 and RAM550. As for each secured 
field, it is desirable to be protected by a mechanism like Fire Wall in which interference is not 
allowed mutually. The IC card chip 150 registers and erases application, data, and 
management information by the command APDU published from the IC card interface control 
circuit 100. As for registration of application etc., and processing of erasion, it is desirable to 
determine propriety of execution of the processing by access authentication. The IC card chip 
150 can also have a function which chooses application by the command APDU published 
from the IC card interface control circuit 100. 

[001 3]lt is desirable to carry the operating system which provides the function preselection 
capability of application in the IC card chip 150. As an operating system which provides such a 
function, MULTOS (MULTOS is a registered trademark of Mondex International and) It is the 
operating system for multi-application type IC cards with which determination of specification 
and management of the license are performed by the MAOSCO consortium. OS etc. 
correspond. The operating system 130 shown in drawing 1 may provide such a function, and 
may not be a general-purpose operating system. 

[0014]lt returns to drawing 1 and explanation is continued. The operating system 130 will pass 
the transmitted command APDU to the application 160 chosen now, if the command APDU is 
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received. However, in the command by which the command APDU is processed with operating 
systems, such as registration of application, deletion, starting, and selection, the operating 
system 130 performs processing corresponding to the command. The application 160 
distinguishes the command APDU sent by the operating system 130, and sends it to the 
instruction set 161 peculiar to application, or the instruction set 143 common to application. In 
the instruction set 143 common to application, an instruction set including the command etc. 
which are needed when realizing a logical channel, a WIM instruction set, etc. correspond. As 
for the instruction set 161 peculiar to application, and the instruction set 143 common to 
application, access to EF(Elementary File)165 in which key information, certification 
information, etc. were stored is allowed. If the command APDU is received, the instruction set 
161 peculiar to application and the instruction set 143 common to application will perform 
processing according to it, and will return a processing result to the host equipment 105. 
[001 5]A logical channel is specified in ISO/IEC 7816 and is the function to provide DF 
(Dedicated File) or application with an independent accessing means logically. With this 
function, the IC card can provide two or more services simultaneously. However, in order for 
an operating system to provide this function, It does not become, if processing speed of a 
system by which the operating system operates, and memory space are not enough, and in an 
operating system used for an IC card to which a function of a system, etc. are restricted, a 
logical channel may not be provided as a function. MULTOSOS etc. correspond as such an 
operating system. 

[0016] Drawing 2 is a figure showing an internal configuration of the logic channel selector 120. 
The logic channel selector 120 has inside of RAM221 which stored the APDU selector 210, the 
logical channel administrative module 220, the APDU conversion module 230, and the logical 
channel management table 223, and EEPROM231 which stored the APDU translation table 
223. The APDU selector 210 is connected with the logical channel administrative module 220 
and the APDU conversion module 230, It has the function to return a function and a response 
from IC card 150 which distinguish the command APDU received from the IC card interface 
control circuit 100, and make it process to a suitable module to the IC card interface control 
circuit 100. The logical channel administrative module 220 performs reservation and release of 
a logical channel. A logical channel number used now, the number of logical channels opened 
at once, a logical channel number reserved, an application number opened now, an application 
executed situation, etc. are stored in RAM221 as the logical channel management table 223. 
The logical channel administrative module 220 processes reservation of a logical channel, etc. 
using information on the logical channel management table 223 stored in RAM221. An 
executed situation of application is the information about which application was performed after 
powering on. 

[0017]lnside of the command APDU to which the APDU conversion module 230 has been sent 
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from the IC card interface control circuit 100, It has a function which complements to the 
command APDU to which the one or more commands APDU will have been sent if necessary 
in order to realize a function of a logical channel, and transmits to the IC card chip 150 about a 
thing about a change of application. When an error etc. occur in this sequence of a series of, 
the APDU conversion module 230 stops sequence processing, and tells that to the IC card 
interface control circuit 100. A series of sequences corresponding to the command APDU are 
stored in EEPROM231 as the APDU translation table 233, and the APDU conversion module 
230 changes into it based on the contents of the APDU translation table 233. However, when a 
function of APDU conversion can be realized uniquely, it is not necessary to store these 
information in EEPROM231 . In order to rewrite the APDU translation table 233, the command 
APDU for exclusive use may be prepared. Security processing of the IC card chip 150 may be 
used for this rewriting. The processing is directed by the command APDU of an input, and the 
APDU translation table 233 is rewritten by a method which the logic channel selector 120 
specifies.For example, when the APDU translation table 233 takes directory structure according 
to the command APDU of an input, rewriting of the APDU translation table 233 is equivalent to 
rewriting of a corresponding directory. 

r0018] Drawing 3 and drawing 4 are flow charts which show processing when access is 
performed from the host equipment 105 using reservation of a logical channel, and two or 
more logical channels, the IC card interface control circuit 100 to the command APDU -- 
receiving (311) -- the logic channel selector 120 judges whether the command APDU is a 
logical channel reservation command. A logical channel reservation command is a command 
for IC cards equivalent to the MANAGE CHANNELopen command in ISO/IEC7816 (331). In a 
logical channel reservation command, it is judged whether the logical channel administrative 
module 220 still has an opening in a logical channel with reference to the logical channel 
management table 223 (333). If a logical channel has an opening, the logic channel selector 
120 will transmit the number young No. 1 except zero to the IC card interface control circuit 
100 among vacant logical channels (337). When there is no vacant logical channel, the logic 
channel selector 120 sets that a logical channel does not open in an error signal, and transmits 
to the IC card interface control circuit 100 (335). The IC card interface control circuit 100 sends 
the received value to the host equipment 105 (313). If the command APDU is not a logical 
channel reservation command, the logic channel selector 120 will judge whether it is a logical 
channel release command. A logical channel release command is a command for IC cards 
equivalent to the MANAGECHANNEL close command in ISO/IEC7816 (339). In a logical 
channel release command, the logic channel selector 120 judges whether the logical channel 
specified by the command APDU is reserved (341). When reserved, the logic channel selector 
120 deletes the logical channel specified from the logical channel management table 223, and 
transmits to the IC card interface control circuit 100 (345). When the logical channel is not 
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reserved, the logic channel selector 120 notifies that as an error (343). When a command 
differs also from reservation of a logical channel, and release, it is usually judged as a 
command (431). 

[0019]The command in which the apparatus connected is not related with a logical channel 
only in the case of the IC card chip 150 is transmitted to the IC card chip 150. The apparatus which 
operates in response to the command APDU in addition to IC card chip 150, IC card interface 
control circuit 100, and logic channel selector 120 in the carding machine machine 1 10 is 
carried, And when the command APDU which the logic channel selector 120 received is 
registered into the logic channel selector 120, the logic channel selector 120 may transmit to 
the apparatus to which the command APDU about a future-equipment command was added. A 
command may usually be transmitted to the added apparatus and a future-equipment 
command may be transmitted to the IC card chip 150. A command refers to commands other 
than the command about logical channel management, and a future-equipment command, and 
a future-equipment command usually means here the command registered into the logic 
channel selector 120. In the registered command, the logic channel selector 120 checks 
whether other apparatus is connected (449), and if it does not exist (451), that will be 
transmitted to the host equipment 105 (411). when other apparatus is connected, the logic 
channel selector 120 transmits the command APDU to the apparatus (453). If the logic channel 
selector 120 is contained in other apparatus at this time, the command APDU may be 
distributed and it may transmit to another apparatus. Also as for these apparatus, when 
transmitting the command APDU to other apparatus, being managed by the logical channel is 
desirable. 

[0020]wnen it is not the command in which the command APDU was registered, the logic 
channel selector 120 judges whether it is that as which the specified logical channel is chosen 
now (433). When the specified logical channel is a logical channel chosen now, the logic 
channel selector 120 transmits the command APDU to the IC card chip 150 (435). However, 
an error is returned when the command APDU is already used by other logical channels with a 
SELECT APPLICATION command, usually, although it is desirable not to perform simultaneously by 
two or more logical channels as for application, it will not be the limitation if application and 
host application accept this. The IC card chip 150 interprets and executes this command 
APDU (481). when the specified logical channel is not what is chosen now, the logic channel 
selector 120 judges whether the specified application is chosen for the first time (437). In this 
case, the logic channel selector 120 transmits a SELECT APPLICATION command (439), and 
processing of the command APDU is performed by the IC card 150 side (483). Then, the logic 
channel selector 120 transmits the received command APDU to the IC card chip 150 (447), 
and processing of the command APDU is performed (491). When application is already 
chosen, The logic channel selector 120 publishes a WRITE STATIC command (441), a 
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SELECT APPLICATION command (443), and a READ STATIC command (445) in order, and 
the IC card chip 150 processes these in order (485, 487, 489). A WRITE STATIC command is 
a command for writing in EEPROM540 the temporary data which the application specified now 
[ of the IC card chip 150 ] holds, A READ STATIC command is a command which returns the 
RAM image saved with a WRITE STATIC command EEPROM540 to RAM550. However, 
when the command published from the IC card interface control circuit 100 is a SELECT 
APPLICATION command, processing of Step 447 is omitted. Although application may 
perform processing which corresponds to these commands before and after each command 
APDU processing, when this technique is used, the IC card chip 150 can be managed more 
efficiently. Then, the logic channel selector 120 is transmitted to the IC card chip 150 (447), 
and processes the received command APDU (491). It is not transmitted to the IC card interface 
control circuit 100, but the response about commands APDU other than the command APDU 
received from the IC card interface control circuit 100 is processed by the logic channel 
selector 120. When an error occurs, if the logic channel selector 120 is necessary, after it will 
change, it returns the error code generated inside to the IC card interface control circuit 100 as 
a response of the received command APDU. 

[0021]A position of the logic channel selector 120 is not restricted between the IC card chip 
150 and the IC card interface control circuit 100. The logic channel selector 120 can be 
arranged at arbitrary places of as [ which is the command APDU / whose an output is the 
command APDU ], although command formats differ, when compatible, may change a 
command format and may be used. A card reader writer etc. which change a communications 
protocol or connector form where this place is inserted between the host equipment 105 and 
the carding machine machine 110 in the host equipment 105 etc. correspond. It is desirable to 
install the logic channel selector 120 in the host equipment 105 to manage two or more carding 
machine machines 1 10 by a logical channel. 

[0022]Usually, although application stored in the IC card chip 150 is independently accessed 
with an external instrument using a logical channel, there is a case where he would like to 
perform data communications between applications, without taking out data to the exterior of 
the IC card chip 150 which is the Tampa-proof field. Processing of payment of electronic 
money, payment, etc. in which this was specifically stored in application with a function of an 
electronic purse corresponds. 

r00231 Drawing 6 is a flow chart at the time of realizing processing mentioned above. Hereafter, 
it explains, also quoting the description of drawing 1 . When the logical channel different from 
the logical channel chosen in Step 433 of drawing 4 now is chosen, as for the logic channel 
selector 120, it is judged next whether it is selection of registration application (61 1). When it is 
not selection of registration application, a 437 or less-step step is performed. In the case of 
registration application, the logic channel selector 120 publishes a false application selection 
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command to the application 160 chosen now [ of the IC card chip 150 ] (613). A false 
application selection command is a command which changes the application selection 
command (it is equivalent to the SELECT APPLICATION command in ISO/I EC 7816) 
published by the host into the form which each application in the IC card chip 150 understands. 
As for an application selection command, in the usual use, it is desirable for the system each 
application controls application like an operating system rather than processes to receive and 
perform. However, it is better for an application selection command to make an operating 
system bypass, and to be able to transmit to application, when performing an internal call of 
application. This invention provides this function. 

[0024]lf this command is received, the application 160 will be changed into an inside call 
instruction of application, and will call the application 190 (651). The called application 190 
judges whether it is having acted an internal call as oneself (681). In a call from an inside, 
APDU processing for an internal call is performed (683), and, in a call from the outside, APDU 
processing for an external call is performed (685). It judges whether its call is a call from an 
inside, and whether the application 190 is the call from the outside (operating system 130), and 
has a function which divides processing. It is judged to a false application selection command 
whether this is received or not. With this function, it is decided how it communicates between 
applications. For example, as for the usual application, it is desirable to be set up not receive 
invoking. As for application like electronic money, it is desirable to be set up so that it may be 
called only from application registered into electronic money application. 
[0025]Via the application 160, it is transmitted to the application 190 and a usual command 
(615) below a false application selection command is processed (687). (653) Specifically, a 
format of a sent usual command is changed and called using an internal call instruction. An 
internal call is valid until other applications are chosen. The host equipment 105 may publish 
the command APDU which performs one or two or more processings between the application 
160 and the application 190 ignited by a false application selection command. Operation etc. 
which purchase goods, such as attestation between applications and an electronic ticket which 
used electronic money, correspond to this. 

[0026]By the case where an application selection command is published, when the selected 
application is the application by the side of a call (617), a RETURN command is published 
(619). The call side application ends invoking, taking advantage of this opportunity, and the 
command received henceforth processes it as a command for application 160. When other 
applications are chosen (621), Transmit a RETURN command (623) and a call is ended (657), 
Next, it processes by publishing a WRITE STATIC command (625), a SELECT APPLICATION 
command (627), and a READ STATIC command (619) in order (659, 661, 689). Processing of 
a call may become an embedded structure. In [ and capacity of RAM cannot fully secure by 
restrictions of the operating system 130 and the IC card chip 150 in that case ] the time of an 
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application change, In the case of the temporary data and the register about the before 
selected application not being held. Before calling application, these data is evacuated to 
EEPROM540, and the temporary data and the register which were evacuated to EEPROM540 
are restored after the re-call of application. However, when the internal call is not accepted in the 
specified application, internal call processing cannot be performed but it is processed as an 
external call. At this time, an external call may not be performed but an error may be returned. 
[0027]A function of a logical channel is applicable besides IC card chip 150. Other systems 
using a support of MultiMediaCard ("MultiMediaCard" is a registered trademark of 
InfineonTechnologiesAG) or a logical channel correspond to this. A format of a command 
which is sent to the logic channel selector 120 and the logic channel selector 120 publishes when 
not using the IC card chip 150 as one of the devices, It may use except a command APDU 
format of a command for IC cards specified by ISO/IEC7816. However, if a command set has a 
command for IC cards, and compatibility and it has a command format convertible into an IC 
card command and a response, The IC card chip 150 can also be used by inserting command 
conversion equipment between the logic channel selector 120 and the IC card chip 150. when 
performing common processing in two or more applications, such as a command about the 
APDU selection modules 140 and 192 and a logical channel, a system applicable to the 
operating system 130 may mount this function. 

r00281 Drawing 7 is a figure showing the example which serves WAP (Wireless Application 
Protocol) using the carding machine machines 710, such as the host equipment 105, such as 
a personal digital assistant, and a SIM card. The carding machine machine 710 operates as 
WIM (WAP Identity Module) which performs security processing. WAP is the specification 
defined in WAP forum for the application which gives its service on a wireless communication 
network, and is the specification defined for the application which performs security processing 
on WAP in WIM. The application 760 in the IC card chip 150, It has the function to perform 
WIM application and this is divided into the command 743 for WIM, an application selection 
related command, and the application command 161 with the APDU selection module 140 in 
the application 760. However, an application selection related command shall be included as 
an extended set of the command 743 for WIM. When application 790 is made into the 
application for electronic money, the application 790, as opposed to other application 770 grades 
registered into the application 790, It has a function which fluctuates the electronic money data 
stored in EEPROM in the application 790, It has a function in which the contractor who had a 
function saved at the above-mentioned EEPROM by making into a log the exchange 
performed at this time, and published applications 790, such as a bank, performs reading and 
elimination for the above-mentioned log, and a function which fluctuates electronic money 
data. It can process by using an internal call of application, without taking out confidential 
information, such as electronic money data, outside. 
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[0029] Drawing 8 is a figure showing a case where carry the IC card chip 150 and the flash 
memory chip 860 in MultiMediaCard(following MMC) 820, and these are controlled by the logic 
channel selector 120. The controller chip 850, The MMC external terminal 830. The MMC 
interface control circuit 853 to control, the IC card interface control circuit 100 which performs 
control of the IC card chip 150, the flash memory control circuit 855 which performs control of 
the flash memory chip 160, the logic channel selector 120, and these. The controller module 
857 to control is comprised. The flash memory chip 860 is a memory chip which uses 
nonvolatile semiconductor memory as a storage, and reading and writing of data are made by 
a flash plate memory command. The MMC external terminal 830 comprises seven terminals, 
and in order to exchange information with the external host equipment 105, it contains a power 
supply terminal, a clock input terminal, a command input/output terminal, a data input/output 
terminal, and a ground terminal. It has a logical channel for one or more flash memories, and a 
logical channel for other IC cards, they are changed by the logic channel selector 120, and the 
host equipment 105 is sent to each controller. By using this structure, application which 
cooperates mutually-independent and performs access of a flash memory and an IC card is 
realized. Structure of access to the IC card chip 150 and access to the flash memory chip 860 
can be communalized according to this structure. This structure is effective also when taking 
composition which includes the IC card chip 150 in the controller chip 850. 
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[Brief Description of the Drawings] 

[Drawing 1] lt is a figure showing the internal configuration of the carding machine machine 
which has IC card chip. 

[Drawing 2] lt is a figure showing the internal configuration of a logic channel selector. 
[Drawing 3] lt is a flow chart which shows the procedure of logical channel management. 
[Drawing 4] lt is a flow chart which shows the procedure of logical channel management. 
[Drawing 5] lt is a figure showing the internal configuration of IC card chip. 
[Drawing 6] It is a flow chart at the time of performing an internal call of application. 
[Drawing 7] lt is a figure showing the internal configuration at the time of serving WAP using the 
carding machine machine which has IC card chip. 

[Drawing 8] lt is a figure showing the case where a logic channel selector is carried in MMC 
which has IC card chip. 
[Explanations of letters or numerals] 

105 [ -- IC card chip. ] - Host equipment, 100 ~ An IC card interface control circuit, 120 -- A 
logic channel selector, 150 
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